Very early this morning a dormant JR account began sending out spam to every registered member through private message. The account has been shut down. I'm now going through and checking the validity of all registered members and closing the holes so we don't go through this again.

Okay, so after an hour of weeding through the JR user database, I wound up deactivating any accounts that had zero posts and been inactive since Jan 1, 2008. That may have been a bit aggressive, but it took out more than dormant 800 users, a good portion of which were spam accounts. The downside to this is that there may be longtime lurkers who never posted but popped in from time to time. Those accounts can be easily reactivated upon request.